opera -- multiple vulnerabilities

Description:

Opera software reports:

• Fixed a moderately severe issue; details will be disclosed at a later date
• Fixed an issue that could allow pages to set cookies or communicate cross-site for some top level domains; see our advisory
• Improved handling of certificate revocation corner cases
• Added a fix for a weakness in the SSL v3.0 and TLS 1.0 specifications, as reported by Thai Duong and Juliano Rizzo; see our advisory
• Fixed an issue where the JavaScript "in" operator allowed leakage of cross-domain information, as reported by David Bloom; see our advisory

References:

• CVE name CVE-2011-3389
• CVE name CVE-2011-4681
• CVE name CVE-2011-4682
• CVE name CVE-2011-4683
• URL: <http://www.opera.com/support/kb/view/1003/>
• URL: <http://www.opera.com/support/kb/view/1004/>
• URL: <http://www.opera.com/support/kb/view/1005/>

Affects:

• opera <11.60
• linux-opera <11.60
• opera-devel <11.60,1

Disclaimer: The data contained on this page is derived from the VuXML document, please refer to the the original document for copyright information. The author of portaudit makes no claim of authorship or ownership of any of the information contained herein.

If you have found a vulnerability in a FreeBSD port not listed in the database, please contact the FreeBSD Security Team. Refer to "FreeBSD Security Information" for more information.